We have published and advisory with the details about this matter ADVISORY-2025-09-26: Vaadin Flow, Hilla and the September 2025 npm supply-chain attacks
We have published and advisory with the details about this matter ADVISORY-2025-09-26: Vaadin Flow, Hilla and the September 2025 npm supply-chain attacks